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NATIONAL SECURITY AGENCY 
CENTRAL SECURITY SERVICE 
FORT GEORGE G. MEADE MARYLAND 20755-6000 


14 June 2011 


MEMORANDUM FOR THE CHAIRMAN. INTELLIGENCE OVERSIGHT BOARD 

THRU: Assistant to the Secretary of Defense (Intelligence Oversight) 

SUBJECT: (U/ /FOUO) Report to the Intelligence Oversight Board on NSA Activities - 
INFORMATION MEMORANDUM 

(UZ/fOUG) Except as previously reported to you or the President, or otherwise stated in the 
enclosure, we have no reason to believe that intelligence activities of the National Security Agency 
during the quarter ending 31 March 2011 were unlawful or contrary to Executive Order or Presidential 
Directive and thus should have been reported pursuant to Section 1.6(c) of Executive Order 12333, as 
amended. 

(U/ /rOUO ) The Inspector General and the General Counsel continue to exercise oversight of 
Agency activities by inspections, surveys, training, review of directives and guidelines, and advice and 
counsel. These activities and other data requested by the Board or members of the staff of the Assistant 
to the Secretary of Defense (Intelligence Oversight) are described in the enclosure. 


GEORGE ElLaRD 


MATTHEW G. OLSEN 
General Counsel 


(U/ /FOUO ) 1 concur in the report of the Inspector General and the General Counsel and hereby 
make it our combined report. 


KEITH B. ALEXApJDER 
General. U. S. Army 
Director. NSA/Chief, CSS 


Enel: 

Quarterly Report 

This document may be declassified and marked 


upon removal of enclosure(s) 


roved for Release bv NSA on 12-19-2014. FQIA Case # 70809 
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TOP SCCRCT-COM I NT - NOrORN 


I. (U) Intelligence, Counterintelligence, and Intelligence-Related Activities that 
Violated Law, Regulation, or Policy and Were Substantiated during the Quarter, 
as well as Actions Taken as a Result of the Violations 


A. (U) Intelligence Activities Conducted under Executive Order (E.O.) 12333 
Authority 

(U) Unintentional Collection against United States Persons (USPs) or Foreign 
Persons in the United States 

(b)(3)-P.L. 86-36 

(U/ /rOUO T During the first quarter of calendar year 201 1 (CY201 1). Signals Intelligence 
(SIGINT) analysts in i l instances inadvertently targeted or collected communications to. from, 
or about USPs while pursuing foreign intelligence tasking. All intercepts and reports have been 
deleted or destroyed as required by United States SIGINT Directive SP00I8. 

(b)(1) 

1. (U) Targeting (b)(3)-p.L 86-36 


(9//RGL TO USA. FVEY) | | an NSA analyst learned that the selector for a 

valid foreign intelligence target remai ned tasked while the target was in the United States 

I Collection against the target’s selector was suspended on 


and no reports were issued. 


All traffic collected was destroyed 


(b){3)-P.L. 86-36 


(U// FOUQ T I I an NSA analyst tasked an e-mail selector for a valid foreign 

intelligence targ et while the target was in the United States. The selector was detasked on j | 
No collection occurred. 


(b)(1) 

(b)(3)-P.L. 86-36 _ 

(STRCL TO UOA. rVCT )[ 


an NSA analyst learned that one selector for a 


valid foreign intelligence taruet remained tasked while the taruei was in the United States fron 


against the selector was suspended 


I Collection 

J and no reports were issued. (b)(3)-P.L. 86-36 


(U// TOU 01 
liad been taCT 


an NSA analyst discovered that selectors associated with a USP 


The selectors were detasked 


(U//P eUO T[ 


intelliuence taruet remained 


suspended |_ 


1 


] an NSA analyst learned that a selector for a valid foreiun 

sked while the target was in the United States. _ 

All traffic was deleted, and collection against the selector was 

(b)(3)-P.L. 86-36 


Derived From: NSA/CSSM 1-52 
Dated: 20070108 
Declassify On: 20320108 
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(S/ZREL T04^A. - FVCYI I I an NS A analyst learned that a selector associatedt>)(1) 

with a valid foreign intellig ence target remained tasked while the target was in the United State^*^^^^^'^ *"' 
from! 1 I I 


1 I No collection occurred. 

(b)(1) 

2 (U) Database Queries (b)(3)-P.L 86-36 

1 . (U) Database Queries (b)(3)-P.L. 86-36 (b)(3)-l8 use 798 

___ (b)(3)-50 use 3024(i) 

( S //REL TO U S A. FVEY) | [ analysts performed overly broad or poorly 

constructed database queries that potentially targeted USPs. For example, these queries used 


(b)(1) 

(b)(3)-P.L. 86-36 


I [ which produced imprecise results. I I the queries returned 

results from the database. The query results were deleted, and no reports were issued, (b)(1) 

Procedural errors contributed to the following incidents. (b)(3)-P.L. 86-36 

(b)(3)-50 use 3024(i) 

D (U/> FOU €n r I an NSA analyst queried raw traffic databases using 

an e-mail selector associated with a valid foreign intelligence target but without 
excludinL’ dates duriiiL’ which the target was in the United States. All results were deleted 

and no reports were issued. 


(b)(3)-PyL. 86-36' 


(ll/jifOUO) On j | occasions [~ | NSA 

’ analysts queried raw traffic databases using selectors associated with USPs. On each 
occasion, the analyst s neglected to perform the required research on the selectors before 
performing the queries. No results were returned from i | of the queries. Results from 
the remaining ^queries were deleted and no reports were issued. 

D (U/ /rOUO) \ I an NSA analyst performed a query in a raw traffic 

database without sufficiently researching the selector. Upon discovery that the selector 
was associated with a USP. the analyst stopped the query and deleted it before checking 
to see whether results were returned. No reports were issued. 

D (U/;y0U07 1 I a SIGINT analyst queried a raw traffic database using a 

selector associated with a valid foreign intelligence target but did not exclude dates 
during which the target was in the United States. After submitting the query, the analyst 
remembered that the target had been in the United States during the range of dates 
submitted and deleted the query before results were returned. 

Q (UA TOUQ )_ an NSA analyst queried the selector of a valid foreign 

intelligence target in raw traffic databases after the selecto r had been detasked because 
I I The query and results were 

deleted on | | and no reports were issued. 

D (U/ tfOW F I an NSA analyst performed a query without limiting the 

date range in a raw traffic database for a USP that had been approved for targeting, 
thereby causing collection on the selector during an unauthorized period. The collection 
was deleted I land no transcripts or reports were issued. 
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-P.L 86-36 


D (U// fQUQ) |_I an NSA analyst performed Communications Metadata 

Analysis against known USP selectors in a raw traffic database. The analyst believed 
that the Supplemental Procedures Governing Communications Metadata Analysis, which 
authorizes communications metadata analysis without confirming the target’s location 
outside the United States, applied to the raw traffic database No results were returned 
from the queries and no reports were issued. 

D (U/ /FOUO) r I an NSA analyst queried a raw traffic database using a 

selector associated with a valid foreign intelligence target but did not exclude dates 
® durina wliich the taruet wa s in the United States, j | 

[ this error occurred because the analyst misunderstood | 

|for the database query. All collection was purged by| | and 

no repons were issued. 

D (U/ Th SUQf T I a SIGINT analyst ran | [ queries against a raw 

traffic database w ithout limiting the results to foreign data. The queries were deleted on 
[ and returned no results. No reports were issued. 

D (U//rQUO) Or j H occasions from | | SIGINT analysts 

queried raw traffic databases using selectors associated with USPs. The analysts 
neglected to perform the required research on the selectors before performing the que ries. 
No results were returned from | ^ .^fthe queries. Results from the reinaininu l I 
queries were deleted and no reports were issued. 

D fu/ /rouo> r ~l an NSA employee, while conducting training, ran a 

demonstration query against a raw traffic database using a selector associated with a 
USP. Although the query returned results, no USP data was collected. No reports were 
issued The example was removed from the class and instructor notes. 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-50 use 3024(i) 


No reports were issued. 



B. (U) Dissemination of U.S. Identities 


(b)(3)-50 use 3024(i) 


(3' '‘ 3I' ' ' ' RCL TO USA. FVCY) The NSA Enterprise issued I I SIGINT product reports 
during the first quarter of CY20II. In those reports. SIGINT analysts included information that 
identified USPs or U.S. entities on| loccasions while pursuing foreign intelligence tasking. 


(b)(1) 

(b)(3)-P.L. 86-36 
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Ini ISIGINT product s, such disseminations wer e found to be improper, and the reports were 
canceled as NSA/CSS j analysts learned ofUSPs. US organizations, or 

U.S. entities named without authorization. All data in the canceled reports was deleted as 
required, and the reports were not reissued or were reissued with proper minimization. 


C. (U) The Foreign Intelligence Surveillance Act (FISA) 
1. (U) NSA/CSS Title I FISA 


(b)(1) 

(b)(3)-P.L. 86-36 


a. (U) Tasking Error 

t mCL TO USA. rVTY) I i NSA analysts 

discovered that selectors associated with targets authorized under Foreign Intelligence 
Surveillance Court (FISC) Orders remained task ed after the targets | ~] 

I I The selectors were det asked On one occasion 

there was no collection. Collection from the selectors for the remaining □ occasions was 
purged, and no reports were issued. 

^-P L. 86-36 

-'-3024(i) 



b. (U) Database Queries 

(S//[\CL TO USA. FVEYl l I a n NSA analyst perf orined |~ I queries oni""! 

selectors associated with FISC-authorized targets | raw traffic database that 

contained E.O. 12333 collection. The queries did not return results and no reports were issued. 


(U//F0OOT Ian NSA analyst performed a query on the selector for a FISC- 

authorized target! a raw traffic database without restricting his search to the 

I [ FISA collection. No results were retrieved by the query, (b)(1) 

(b)(3)-P.L. 86-36 

c. (U) Data-Handling Errors 

(U//FOUO)_ a SIGINT analyst posted FISA information to an incorrect chat 

window that is not authorized tor FISA data. The analyst notified his overseers of his mistake. 

Chat posts age off after 48 to 72 hours. 


(b)(3)-P.L. 86-36 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-50 use 3024(i) 




DOCID: 4165215 


2. (U) 


(b)(3)-P.L. 86-36 
(b)(3)-50 use 3024(i) 


Nothing to report 


3.-t T0//Q I //r j r) -Business Records (BR) Order 



4. (U) The FISA Amendments Act(FAA) 

a. (U) Section 702 

i. (U) Unauthorized Targeting 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18USC 798 
(b)(3)-50 use 3024(i) 


(b)(3)-P.L. 86-36 


(U// rOUO) Note: As previously reported in the 20/0 Second Quarter Report. NSA CSS has 
implemented a new p rocess to ensure that FAA collection that is required to be purged from NSA CSS 
databases is purged. \ \ fo idenfif\' non- 

compliant data that should he purged. All collection that has been marked for purging will he purged. 

Data that is marked for purging is completely unusable or inaccessible, even if the data has not been 
physically removed at that rime. 

(£//6l/ i TlEL TO UOA. FVCV) An e-mail selector was tasked i K inder FAA 

§702 without suftkie nt justification that the ta rget was located outside the United States. Tlie 
selector was detasked No collection occurred during the tasking period. 

4S/fP . EL TO USj\. FVCV l l | an NSA analyst discovered that the selector (b)(1) 

associated with a valid foreign intelligence target remained tasked while the target was in the (b) (3)-P I- 86-36 
United States. The erro r occurred because } 

[The selector was detasked l | . Collection from I ( 

I has been marked for purging. No reports were issued. 

(S//MZL TO USA. rVIIV) | | an NSA analyst discovered that | [ selectors 

had been tasked without siitTicient informati on to determine the target's location outside the 
United States. The selectors were detasked I I All FAA §702 collection 

associated with this selector from [ has been marked for purging. No 

reports were issued. 

(S//TI.EL TO USA. FVEY i I an NSA analyst discovered that a selector had 

been tasked without validation that the targe t’s location was outside the United States. The 
selector was detasked F I Non-compliant collection has been marked for 

purging. No reports were issued. 

(u//Feue) I I an NSA analyst retasked a selector without following tasking 

procedures, including verification that the target was located outside the United States. The 


(b)(3)-P.L. 86-36 
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TOP SCCRIT COMR^rr I^JOFORT^ 


(b)(3)- 


(b)(3)-P.L. 36-36 


selector was not detasked because by the time the error was discovered, addi tional NSA taskin g 
had been created and approved 


No data was collected 


(S//REL TO USA. FVEV) [ 


(b)(3)-P.L. 86-36 
(b)(3j-50 use 3024(i) 

I an NSA analyst discovered that an FAA v;702 


selector remained tasked while the taniet was in the United States between 


I 


The selector was detasked 


from! 


has been marked for purging 


I Non-coiriDliant coll eel ion 
No reports were issued. 


(b)(1) 


(u/ /rouQ )[ 


I an NSA staff officer discovered that [selectors. approve d 


E.O. 12333 tasking, had erroneo usly been tasked ag ainst FAA $702 
detasking request was submitted | [ but detasking was not completed until 


-P.L. 86-36 


No collection occurred, and no reports were issued. 


tr 


(U) Tasking Errors 


(b)(3)-P.L. 86-36 


(U/ZFOUOp On I | occasions[| 


NSA analysts 


discovered that e-mail selectors for valid foreign intelligence targets had been improperly tasked 
under FAA $702. Because the tasking error rendered the selectors invalid, no collection 
occurred. The selectors were detasked. 


(b) (1) 

(b) (3)-P.L. 


86-36 


(9//9I//[II:L to U5A. TVCY) 


an NSA analyst discovered that an incorrect 


e-mail selector had been tasked. The error occurred because the analyst mistyped the selector 

and tasked an unassociated but valid account. The selector was detasked _ 

No data was collected. 

M. 86-36 

(U//FOUO) I an NSA analyst discovered that a selector tasked under FAA 


$702 was invalid. The last digit ofthe selector had mistakenly been excluded. The selector was 
detasked the same day. Detasking was also confirmed that day. Because the selector was 
invalid, no collection occurred. 

(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-50 use 3024(i) 


(U) Database Queries 


(b)(1) 

(b)(3)-P.L. 


86-36 


(S/'RIIL TO USA. rVTV t 


. an NSA analyst performed a database query 
Jusing a selector associated withaUSP. The analyst 


neglected to perform the req uired research on the selector before per forming the query. The 
query was also overly broad. [~ | No results were returned 

from the query. 


(U/ /PQUO) 


an NSA analyst queried on a target's selector in a raw traffic 


database without first researching the selector to determine whether it was associated with a 
USP. The query returned results that associated the selector with a USP. No reports were 
issued. 


TOP SECRET//COhCMT//NOFOR N- 
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iv. (U) Detasking Delays 


(b)(3)-P.L 86-36 


( UA'TO UQ-) Because of a technical problem in an NSA collection system, collection continued 
on l I selector s authorized tinder a F ISC Order that expired I 1 The selecto rs 

were detasked | ~| The technical problem was resolved | ~ 

I I an NSA analyst discovered that a selector had remained ta sked 

for collection ati er the selector was request ed to be detasked fr om FAA ^702 collection on I I 
The selector was detasked F I No data was collected from|_| 


No data was collected from 


V. (U) Data-Handling Errors 


. 

. 

' I 


(b)(3)-P.L. 86-36 


LJ/ /rouo) |_ I an NSA analyst mistakenly e-mailed FAA §702 traffic to 

ersonnel not authorized to receive FAA§702 data. The e-mails were recalledl 


(U//FOUO)|_I a SIGINT analyst unintentionally forwarded unminimized USP 

information in FAA §7 02 traffic to an unau thorized analyst. The traffic was purged from 
unauthorized databases! I 


vi. (U) Over-collection 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18USC 798 
(b)(3)-50 use 3024(i) 
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TOP SECRET ' CONAMT/ NOFORN 


(l)(1) 

(I )(3)-P.L. 86-36 
4)(3)-18 use 798 


b. (U) Section 705(b) 


(b)(3)-50 use 3024(i) 


I. (U) Unauthorized Targeting 


(0//Gl//[\CL TO UaA. rVC T)[ 


_ I NS A analysts targete d 

selectors oi l I FAA $705(b)-authorized targets while the targets wer d Ithe 


United States. In both cases. NSA personnel were]_ 

the United States. All tasked selectors associated with the targets were detasked. No reports 
were issued 


(U) Database Queries 


'(b)(1) 

(b)(3)-P.L. 86-36 


(.G//SI//PEL TO l i SA. F\TV) 


3 an NSA analyst was discovered to have 


queried in a raw traffic database on the selector associated with an FAA $705(b)-authorized 

1 who is located in the United States. T he selector had been detasked 

but the analyst did not see this 


target 

earlier and^_ 

information when he researched the selector before performing tlie query. The analyst deleted 


the query and the resiiltsl 


and no reports were issued. 


(Si'/Sli'/REL TO USA. FVEY) [ 


3 . an NSA analyst performed database queries 


on valid FAA ^70.>(b) selectors in raw traffic databases that contain FAA §702 data. The analyst 
did not follow query guidelines, violating FAA §702 minimization procedures. The queries were 
deleted, No data was collected, and no reports were issued 


D. (U) Other 


1. (U) Unauthorized Access 


(U//Fe uO H 


it was discovered that the approval process for} ^access to (b)(3)-P.L. 86-36 


mission systems did not include a requirement for an operational review or mission justification, 
allowing external organizations with no authority to access raw SIGINT data to view or 
download that data. All SIGINT involved was collected under E.O. 12333 authority. The extent 
of the unauthorized access is being evaluated, and a review of the approval process is under way. 

Once these efforts are complete, corrective measures will be implemented . (b)( 1 ) 

(b)(3)-P.L. 86-36 

2. (U) Data-Handling Errors ulc 3oL(i) 


(O/'SI/zRE fc- TO U5A. r\’i:'i' ) 


were intercepted as part of 


surveillance equipment training, in acc ordance with authoriz ed procedures. However, the 
trainees read and discussed the content| [rather than deleting them as soon as 


the equipment was calibrated. All trainees were counseled on proper procedures. 


(U/ /FOUO)[ 


I an NSA analyst queried a raw traffic database using a selector 


associated with a valid foreign intelligence target but did not exclude dates during which the 

(b)(3)-P.L. 86-36 


TOP SECriI:T//C0NDf ' n'//f ' 10r0Rf^ 
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target was in the United States. The analyst then e-mailed the retrieved data to an external 
organization. All associated e-mails have been deleted, and no reports were issued 


(u/ /rouO ) r I an NSA analyst disseminated USP in formation to ex ernal 

organizations. When the USP status was discovered | the product was recalled 

and destroyed. 


(U.. TOUQ ) 



(b)(3)-P.L. 86-36 

(u/ /rQuo »[ 


an NSA analyst shared with an external organization without 
proper authorization raw SIGINT containing the identity of a USP. The SIGINT indicated that 
the USP may have been a target of hostile intelligence activity, but proper approval for 
dissemination had not been granted. 


(U/ /FOUO) [ vISA/CSS attempted to validate the security of an NSA- 

hosted webpage that was in development. The existing development firewall, however, did not 
prevent unauthorized users from accessing the link. The link was removed from the operational 
webpages, and development firewalls have been upgraded with stronger security. 


(U/ /FOUe) 


a SIGINT analyst disseminated Top Secret SIGINT metadata on 


a SECRET network. The affected accounts were deleted, and the SIGINT was purged from the 

(b)(1) 

P L 30 

3. (U) Unauthorized Collection and Data Retention (b)( 3)-50 use 3024 (i) 


( f i // RCL TO UFiA. rVCV) 


[ 


an NSA analyst discovered that 


] 


be for a valid foreign intelligence target, was determined to be f or a USP on 
detasked alonu with other selectors for the taiuet that same dav. 


The selector, or iginally belie ved to 

I and was 


jTratfic collected fromj 


I was purged by 


(b)(1) 

(b)(3)-P.L. 86-36 
NSA analysts discovered 


and no reports were issued. 

4. (U) Consensual Collection 

(UA‘ FOU(^ On | j occasions from 
that consensual agreement s authorizing the targeting of USPs had expired and that the associated 
selectors had remained on tasking until the following day. Upon discovery, the analysts detasked 
the selectors. No collection had occurred during the violation periods. A software modification 
is being implemented to detask consensual collection selectors automatically when the consent 
expires. 


(U// TOUO )[ 


consensual collection request had begun 


an N SA analyst discov ered that tasking in support of a (b)(3)-P.L. 86-36 


two days before the request was 


approved. The analyst believed that the request had already been approved on the basis ofthe| ] 


TOP SECRET'/COhONTr NOrORf i 
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X. 86-36 


TOP SECRET CONflf^JTA'NOrORJ’J 


effective dates of the consent. The selectors were not detasked 


because the approval was nearing completion at the time the error was discovered. No collection 
had occurred during the violation period. 


5. (U) Computer Network Exploitation (CNE) 



(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18USC 798 
£b)(3)-50 use 3024(i) 


E. (U) Counterintelligence Activities 
(U) Nothing to report. 

F. (U) Intelligence-Related Activities 


(b)(1) 

(b)(3)-P.L. 86-36 

■f {}//SI//NF ).To reduce the risk of unauthorized telephony collection and prevent violationtt>)(3)-50 USC 3024(i) 
NSA/CS S instituted a process that gives analysts greater and faster insight into a target’s 
location. 



When collection occurred, data was purged from NS.A CSS's principal raw traffic 


repositories when required. 
tS)‘ > ‘ S t WF »| 


(b)(1) 

"1(3)-P.L. 86-36 
(3)-50 USC 3024(i) 


NSA an^vsts ioundl |e-mail selecm^^ 


|this quarter. When collection 
occurred, it was purged from NSA/C^S's principal raw traffic repositories when required. 

(U/ /FOUQ ^ Although not violations ofE.O. 12333 and related directives. in | | instances, 
database access was not terminated when access was no longer required. Once identified, the 
accesses we re term inated. In addition, there were I l instances of unauthorized access to raw 
SIGINT and| [instances of account sharing during the quarter. 


I it was discovered that analysts working under Title 10 (non- 
SIGlNT/military operations) authority’ were exposed to raw SIGINT metadata. The exposur e. 
which took place during the I I (b)(3)-P-l-. 86-36 

I I occurred because system automated 

access controls malfunctioned. Manual controls have been put in place to ensure that access of 
data is commensu rate with authorities. 


TOP GCCRET//CONflNT//NOrQRN 
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lupshLRir coMiin' i-JoroRU 


II. (U) NSA/CSS Office of the Inspector General (OIG) Intelligence Oversight (10) 

Inspections, Investigations, and Special Studies 

(U//FOUO) During the first quarter of CY2011. the OIG reviewed various intelligence activities 
of NSA/CSS to determine whether they had been conducted in accordance with statutes. 

Executive Orders. Attorney General procedures, and Department ofDefense (DoD) and internal 
directives. With few exceptions, the problems uncovered were routine and showed that 
operating elements understand the restrictions on NSA/CSS activities. 

A. (U) NSA/CSS Hawaii (NSAH) 

(U/ /FQUQ ) During the joint IG inspection of NSAH. the 10 inspection team reviewed the 10 
Program. 10 training, and application of 10 standards in the SIGINT mission activities 
performed at the site. The 10 Program Manager, who has extensive operational and 10 
experience, is known to the workforce and managers. Although there are established procedures 
for accomplishing 10 tasks, the procedures are not documented Despite the considerable time 
and energy spent tracking 10 training, the inspection team highlighted weaknesses in the 
procedures for tracking 10 training for reservists and contractors. On the basis of survey results, 
inspectors found that NSAH operations personnel had an adequate knowledge of 10 standards. 

They had some weaknesses, however, in understanding the 10 authorities regarding the handling 
of raw SIGINT and minimization and dissemination standards. The NSA OIG is tracking 
corrective actions. Problems with inexperienced analysts constructing overly broad database 
queries were also noted in the inspection. 

B. (U) Annual Selector Review 

(S,//RBL rpo UCA) FVQ¥) 

[viff KJUKj) unaer Atto rney General approved procedur es. NSA/CSS is required to conduct a 

yearly review of certain l~ I terms. As a result of the review, more (b)(1) 

than i I terms were removed because the target offices concluded that they did not have (b)(3)-P.L. 86*36 

foreign intellig ence value. No terms were removed because they did not have proper _ 

authorizations | I 


C. (U) Trends Noted in the Annual Review of Quarterly 10 Reports for 2010 

(U/ J i OLK^ t The NSA OIG published a report on the analysis of trends noted in the quarterly 10 
reports for CY2010. The review highlighted three areas in which analysts committed procedural 
errors: 

• (U/ tf i QUO ) Failure to perform required research on selectors before querying raw traffic 
databases 

• (U// FOUQ ) Failure to follow guidelines for querying FAA §705(b)-aulhorized selectors 

• (UZ/F OUO) Dissemination of FISA or FAA-derived data to e-mail aliases that include 
personnel not authorized to receive the data. 

The OIG advised the SIGINT Directorate to implement enhanced training and awareness 
procedures. 


TOP 9FCRET//CONfl>IT//NOrORN 
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TOP SECRET COM I OT NOFORN 


D. (U) Misuse of the U.S. SIGINT System 

(U) Nothing to report. 

E. (U) Congressiona I and Intelligence Oversight Board Notifications 


(b)(1) 

(b)(3)-P.L. 86-36 


''(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18USC 798 
(b)(3)-50 use 3024(i) 


(TS//SI//NF)[ 


]NSA/CSS notified the Congressional int elligence committees o f 


the unauthorized disclosure of classified information from NSA reporting 


NSA believes that this disclosure has compromised 


intelligence sources and 


may se\ erelv affect our ability to provide timely and accurate foreign intelligence about activity 
I A copy of the notification is enclosed. 


(TS/ZSIZ/Nf) 


NSA/CSS followed up on the oral notification to the 


'e d up 0 

Congressional intelligence committees re.uarding | l incidenls involving the over-collection of 
communications. Both incidents involved t he acquisition of communications that were 

The DOJ provided preliminary notice of these] | 


incidents to the FISC^ 


See the referenced items under “Over-collection'' on 


pages 7 and 8. A copy of the notification is enclosed. 

F. (U) Other Notifications 


(b)(1) 

(b)(3)-P.L. 86-36 


(b)(1) 

(b)(3)-P.L. 86-36 
(b)(3)-18USC 798 
(b)(3)-50 use 3024(i) 


(S//NF) -NSA/CSS has notified the Attorney General of | I consensual and nonconsensual 
intelligence-related collection activities for USP hostage or detainee cases. 


(U) Substantive Changes to the NSA/CSS 10 Program 


(U) Nothing to report. 

IV. (U) Changes to NSA/CSS Published Directives or Policies Concerning 
Intelligence, Counterintelligence, or Intelligence-Related Activities and the 
Reason for the Changes 


(U) Nothing to report. 

V. (U) Procedures Governing the Activities of DoD Intelligence Components that 
Affect USP (DoD Directive 5240.1-R, Procedure 15) Inquiries or Matters Related to 
lO Programs 


(U) Nothing to report. 
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